How to compare with value: SMEW-403?

[metylkinandrey]

Please advise on my request.
Line from request:
| where ('result.code'=-1 OR 'result.code'=1 OR 'result.code'=21 OR 'result.code'=23 OR 'result.code'=SMEV-403)

The query looks for messages with all result.code values except SMEV-403.
Tell me how can I fix this?

[richgalloway · Accepted solution]

Since the value sought is a string, it should be inside quotation marks.

| where ('result.code'=-1 OR 'result.code'=1 OR 'result.code'=21 OR 'result.code'=23 OR 'result.code'="SMEV-403")

[metylkinandrey]

Thank you! That helped!

[richgalloway]

If your problem is resolved, then please click the "Accept as Solution" button to help future readers.